CVE-2020-36922

Katalog CVE

CVSS 7.5 · High EPSS 0,64%

Kerentanan Exposure of Sensitive System Information to an Unauthorized Control Sphere pada sony bravia signage. Skor CVSS 3.1 7.5 (High) menurut vulncheck.com.

Deskripsi (NVD)

Sony BRAVIA Digital Signage 1.7.8 contains an information disclosure vulnerability that allows unauthenticated attackers to access sensitive system details through API endpoints. Attackers can retrieve network interface information, server configurations, and system metadata by sending requests to the exposed system API.

Rincian

Terbit di NVD

6 Januari 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.5 (High), sumber vulncheck.com
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-497: Exposure of Sensitive System Information to an Unauthorized Control Sphere

EPSS (30 hari)

0,64% peluang dieksploitasi; lebih tinggi dari 49,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://cxsecurity.com/issue/WLB-2020120028 advisory pihak ketiga
• https://exchange.xforce.ibmcloud.com/vulnerabilities/192606 advisory pihak ketiga
• https://packetstorm.news/files/id/160343 advisory pihak ketiga
• https://www.exploit-db.com/exploits/49187 exploit · advisory pihak ketiga · vdb entry
• https://www.vulncheck.com/advisories/sony-bravia-digital-signage-unauthenticated-system-api-information-disclo... advisory pihak ketiga
• https://www.zeroscience.mk/en/vulnerabilities/ZSL-2020-5610.php exploit · advisory pihak ketiga
• https://pro-bravia.sony.net product
• https://pro-bravia.sony.net/resources/software/bravia-signage/ product
• https://pro.sony/ue_US/products/display-software product